HTML5 video not found : HTTPS issue on Mobiles

Hi,
I’m using flowplayer (+ pro) to stream HLS videos from amazon S3 using cloudfront.
My website is in HTTPS and I set my cloudfront distribution’s viewer policy to “HTTPS only”.
Everything was working fine (I could play my videos on mobile) until (I’m not sure) I updated to wordpress 4.5. Now I’m facing this:

– On both iOS and Android, when I hit play on the video, it says “HTML5 Video File not found” but what’s weird is that underneath that message, it shows me the link to my video starting with “http://…..” instead of “https://…” BUT: my video link in the player shortcode in the backend is definitely with httpS.
So why is the player calling the video without the https?

– As soon as I set my cloudfront viewer policy to “HTTPS and HTTP” I can play the video on mobiles… But my https gets screwed, and the lock in the address bar is orange on chrome android..

Can you look into this, took me while to figure it out but I’m certain it was working fine a few weeks ago. I still don’t know how to send my credentials as private message here or putting screenshots… Let me know, thanks!